PT-2026-27863 · Designingmedia · Energo

Published 2026-03-25 · Updated 2026-03-30 · CVE-2026-24970

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Energox versions n/a through 1.2

Description An improper limitation of a pathname to a restricted directory ('Path Traversal') exists in designingmedia Energox energox, allowing Path Traversal. This allows an attacker to potentially access files and directories outside of the intended restricted directory.

Recommendations Update Energox to a version greater than 1.2.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-24970

Affected Products

Energo

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-24970 · Security Note
• https://patchstack.com/database/Wordpress/Theme/energox/vulnerability/wordpress-energox-theme-1-2-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2038517051564888115 · Twitter Post